Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-21977 |
low | 3.2 | 0.0016 | 2026-11-09 | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to | |
CVE-2024-51423 |
medium | 6.1 | 0.0032 | 2026-11-09 | Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allo | |
CVE-2024-48705 |
medium | 6.5 | 0.0335 | 2026-11-09 | 1 PoC | Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulner |
CVE-2024-46917 |
high | 8.1 | 0.0025 | 2026-11-09 | Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attribute | |
CVE-2024-46916 |
high | 8.1 | 0.0038 | 2026-11-09 | Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allo | |
CVE-2024-58240 |
high | 7.8 | 0.0034 | 2026-11-09 | In the Linux kernel, the following vulnerability has been resolved: tls: separate no-asyn | |
CVE-2024-27856 |
high | 7.8 | 0.0062 | 2026-11-09 | The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7 | |
CVE-2026-124587 |
medium | 5.3 | 0.0045 | 2026-11-09 | A vulnerability was identified in elizaOS eliza 2.0.3-beta.7. The affected element is an u | |
CVE-2026-92683 |
high | 8.6 | 0.0048 | 2026-11-09 | Incorrect authorization in the @authentication directive JWT where filter evaluation in Ne | |
CVE-2026-124588 |
low | 2.1 | 0.0032 | 2026-11-09 | A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted | |
CVE-2026-113508 |
high | 7.5 | 0.0049 | 2026-11-09 | Apache Airflow's logout endpoint attempted to revoke the presented token on the server, bu | |
CVE-2026-101031 |
critical | 9.1 | 0.0043 | 2026-11-09 | The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP addres | |
CVE-2026-96285 |
high | 8.8 | 0.0059 | 2026-11-09 | Apache Airflow 3.3.1 shipped a fix for CVE-2026-67260 that checks the scheduler's decoded | |
CVE-2026-86468 |
medium | 6.5 | 0.0044 | 2026-11-09 | Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument | |
CVE-2026-82337 |
high | 7.3 | 0.0048 | 2026-11-09 | Apache Airflow rebuilt deadline alert fields through generic deserialization, which import | |
CVE-2026-86829 |
high | 8.8 | 0.0063 | 2026-11-09 | 1 PoC | Apache Airflow's scheduler fully deserializes XCom values written by task code while evalu |
CVE-2026-76185 |
medium | 6.5 | 0.0045 | 2026-11-09 | Apache Airflow's Task SDK secret cache built its keys from the team name and secret id wit | |
CVE-2026-68982 |
critical | 9.8 | 0.0046 | 2026-11-09 | 1 PoC | Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadli |
CVE-2026-50204 |
medium | 6.5 | 0.0018 | 2026-11-09 | Apache Airflow's audit log stored Connection and Variable secret values in cleartext in th | |
CVE-2024-38002 |
critical | 9.3 | 0.0063 | 2026-11-09 | The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4. | |
CVE-2026-124637 |
medium | 5.3 | 0.0026 | 2026-11-09 | A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing fo | |
CVE-2026-124586 |
medium | 5.5 | 0.0039 | 2026-11-09 | A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCac | |
CVE-2026-111455 |
medium | 6.5 | 0.0030 | 2026-11-09 | Apache Airflow's asynchronous connection test checked permissions when the test was queued | |
CVE-2026-111454 |
medium | 6.5 | 0.0035 | 2026-11-09 | Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produ | |
CVE-2026-111453 |
medium | 4.3 | 0.0026 | 2026-11-09 | Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permi | |
CVE-2026-111452 |
medium | 6.5 | 0.0035 | 2026-11-09 | Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, | |
CVE-2026-111421 |
high | 8.8 | 0.0060 | 2026-11-09 | Apache Airflow's Task Execution API stored XCom values written by a task without the reser | |
CVE-2026-111395 |
high | 8.2 | 0.0046 | 2026-11-09 | Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A use | |
CVE-2026-107474 |
medium | 6.5 | 0.0040 | 2026-11-09 | The Apache Airflow connections API did not mask the apprise provider's `config` connection | |
CVE-2026-113504 |
medium | 6.5 | 0.0039 | 2026-11-09 | Apache Airflow's secrets masker stopped descending into nested structures after five level | |
CVE-2026-124585 |
high | 8.6 | 0.0221 | 2026-11-09 | A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202 | |
CVE-2026-123870 |
critical | 9.5 | 0.0030 | 2026-11-09 | The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON | |
CVE-2026-116337 |
low | 0.6 | 0.0029 | 2026-11-09 | Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling | |
CVE-2026-124582 |
medium | 5.3 | 0.0043 | 2026-11-09 | A vulnerability was identified in WebTorrent up to 2.8.5/3.0.21. Affected by this vulnerab | |
CVE-2026-92606 |
medium | 6.0 | 0.0007 | 2026-11-09 | 1 PoC | Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software |
CVE-2026-124584 |
medium | 4.8 | 0.0014 | 2026-11-09 | A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the func | |
CVE-2026-107181 |
high | 8.6 | 0.0063 | 2026-11-09 | 3 PoC | Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in |
CVE-2026-94249 |
high | 8.1 | 0.0025 | 2026-11-09 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Insti | |
CVE-2026-124581 |
medium | 5.5 | 0.0026 | 2026-11-09 | A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is | |
CVE-2026-124580 |
critical | 9.3 | 0.0279 | 2026-11-09 | A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202 | |
CVE-2026-113437 |
medium | 6.9 | 0.0034 | 2026-11-09 | Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the OD | |
CVE-2026-109582 |
medium | 5.1 | 0.0012 | 2026-11-09 | Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Se | |
CVE-2026-124578 |
medium | 6.9 | 0.0040 | 2026-11-09 | A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted elemen | |
CVE-2026-124579 |
low | 2.1 | 0.0023 | 2026-11-09 | A vulnerability was determined in aaPanel BillionMail up to 4.9. Affected by this issue is | |
CVE-2026-120386 |
medium | 5.1 | 0.0023 | 2026-11-09 | Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the | |
CVE-2026-124577 |
high | 8.9 | 0.0207 | 2026-11-09 | A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected | |
CVE-2026-124576 |
medium | 6.9 | 0.0031 | 2026-11-09 | 1 PoC | A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function |
CVE-2026-124574 |
medium | 5.3 | 0.0024 | 2026-11-09 | A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects | |
CVE-2026-124575 |
medium | 6.3 | 0.0041 | 2026-11-09 | A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0. This issue aff | |
CVE-2026-81422 |
medium | 5.3 | 0.0018 | 2026-11-09 | The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify |